added cert requirements